Sentriz Gonic vulnerabilities
- sentriz gonic gonic before 0.22.0 Missing Administrator Check on the Subsonic startScan Endpoint 5.3 Medium
- sentriz gonic gonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host 8.1 High
- sentriz gonic Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) 7.1 High
- sentriz gonic Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist 7.1 High